From: Chris Wincentsen (CWincentsen@csustan.edu)
Date: Wed Sep 10 2003 - 17:03:06 EDT
I had software support stumped for a couple of days on this. I had changed
the default file, /etc/auth/system/default and removed some suspicious
looking lines in the file...
:u_cmdpriv=boot,ping,printerstat,tape:\
:u_syspriv=execsuid,chmodsugid:\
:u_basepriv=execsuid,chmodsugid:\
su, in ENHANCED (C2) security mode, needs both the u_syspriv and u_basepriv
parameters to work properly. The reason the root account worked was because
these privs were already set there in edauth. One of the tests I did was to
set security back to BASE mode and the su command worked fine that way.
(I had made some other changes too, but these are the relevant lines which
caused su to stop working.)
Software support also said that although these parameters are undocumented,
they are necessary, so leave them in there!
My thanks to David Knight who suggested checking for password file problems
and Chris Ford who suggested checking login file problems. You guys were
close! Many thanks to Sandy Levitt at HP software support for getting me
back on track.
Chris Wincentsen
VMS & UNIX Sys. Admin. and Banner VR guy
Office of Information Technology
CSU Stanislaus - Turlock, CA
(209) 667-3732 CWincentsen@csustan.edu
> ----------
> From: Chris Wincentsen
> Sent: Thursday, September 4, 2003 3:18 PM
> To: 'tru64-unix-managers@ornl.gov'
> Subject: su - memory fault error
>
> Hi,
>
> Question from a new subscriber (me). I'm setting up a new ES45 with Tru64
> 5.1b, patch kit 2 installed. The "su" command is returning a memory fault
> message/error when I try to su to any account besides root. Anyone else
> seen this and know the cure?
>
> Some samples - works for su root, but not to other accounts, even when in
> root to start with...
>
> chrisw@csusa2:..staff/chrisw > su root
> Password: (works to root)
> chrisw@csusa2:..staff/chrisw > exit
> chrisw@csusa2:..staff/chrisw > su - root
> Password: (entered wrong password)
> Sorry
>
> chrisw@csusa2:..staff/chrisw > su - root
> Password: (works to root with -)
> Your terminal type is now set to vt220
> Thu Sep 4 15:03:55 PDT 2003
>
> root@csusa2:/ >
> root@csusa2:/ > su banjobsu
> Memory fault
> root@csusa2:/ > su chrisw
> Memory fault
> root@csusa2:/ > su - chrisw
> Memory fault
> root@csusa2:/ > su root (from root, works to su
> root)
> root@csusa2:/ >
>
> (Entries in the sialog show that the command succeeded in all cases (with
> a
> correct password).)
>
> Comments or suggestions appreciated!
>
> Chris
>
> Chris Wincentsen
> VMS & UNIX Sys. Admin. and Banner VR guy
> Office of Information Technology
> CSU Stanislaus - Turlock, CA
> (209) 667-3732 CWincentsen@csustan.edu
>
>
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:49:35 EDT